dmv.community is one of the many independent Mastodon servers you can use to participate in the fediverse.
A small regional Mastodon instance for those in the DC, Maryland, and Virginia areas. Local news, commentary, and conversation.

Administered by:

Server stats:

165
active users

#nextjs

4 posts4 participants0 posts today

I'm working on a JS side project to take a break from #dotnet. Tried adding #shadcn to #NextJS in a #NXWorkspace. Shadcn expects both package.json and Next.js in the same place, with Nx package.json is in root while Next.js is in a subfolder. All tutorials on how to get it working seem like magical incantations and they're for a previous version of shadcn and tailwind. Eventually got it to complete init, but had to create an empty vite.config.js in root dir to fool shadcn into installing - will see if it works tomorrow.

So, I need an idea for a side-side project to take a break from JS. Maybe Golang this time?

@EvanHahn can you share tips to aspiring devs struggling to create software? Sorry, I know this is a little generic question, but since the last three years I've graduated jobless and I am lacking the motivation to work towards a soul-draining 9-to-5 IT job.

Not having any successful - as of now, I am struggling to create my own blog/portfolio in Next + MDX + Tailwind, especially the design aspect.

Critical Next.js Middleware Vulnerability (CVE-2025-29927)

A major auth bypass vulnerability in Next.js middleware (prior to v14.2.25 / v15.2.3) allows attackers to inject the x-middleware-subrequest header and bypass authorization entirely. Exploitable via simple HTTP requests—no user interaction, no special permissions.

Patch. Now. Or block the header manually.

GitHub scored this 9.1 CRITICAL, but the real issue? This flaw exposes a systemic weakness in middleware validation, and some vendors weren’t exactly upfront about the risks.

Details + POC: zeropath.com/blog/nextjs-middl
NVD: nvd.nist.gov/vuln/detail/CVE-2

Security theater is easy. Secure defaults and transparency are harder—but essential.

zeropath.comNext.js Middleware Exploit: Deep Dive into CVE-2025-29927 Authorization Bypass - ZeroPath BlogExplore the critical CVE-2025-29927 vulnerability in Next.js middleware, enabling attackers to bypass authorization checks and gain unauthorized access.